Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted yesterday

Senior Software Engineer, Agent Policy Fabric

NVIDIA2,576 open roles

Where
US CA Santa Clara
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Software Engineer, Agent Policy FabricNVIDIA · US CA Santa Clara

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on NVIDIA's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.4% of postings close within 7 days. Measured by our own scanner across the market. NVIDIA postings stay open a median of 39 days.

Share of postings closed within
  1. 2.0%1 day
  2. 4.2%3 days
  3. 11.4%7 days
  4. 17.5%14 days
  5. 34.2%30 days
  6. 43.5%60 days
This job: posted yesterday

NVIDIA median: 39 days open

The posting

The Agentic Safety Engineering team is building Agent Policy Fabric (APF), an enterprise governance layer for AI agents. APF combines signed policy, runtime verification, policy projection, credential mediation, and audit records to help govern the actions agents take across enterprise systems. We are looking for a Senior Software Engineer to help turn the APF proof of concept into diligent production software. You will build, implement, test, and operate features in policy verification, runtime integration, or conformance testing. Working with experienced platform and security engineers, you will own a defined feature or subsystem and help ensure that policy decisions are accurate, integrations are reliable, and failures are handled safely!

Join us!

What You'll Be Doing:

  • Build policy-verification features: Implement components of the Runtime Policy Verifier and authorization APIs, including signed policy validation, freshness and revocation checks, rollback protection, and binding decisions to the correct subject and runtime context, following reviewed security contracts.
  • Implement policy projection: Translate canonical APF policy into runtime-specific rules and adapter constraints. Handle unsupported policies and partial updates safely so runtimes admit work only when the required policy has been accepted.
  • Develop runtime integrations: Work with OpenShell and other runtime engineers to implement and test agreed interfaces for policy consumption, runtime context, admission decisions, and audit events. Document interface behavior and raise gaps or conflicting assumptions for resolution.
  • Strengthen correctness and conformance: Build fixtures, compatibility tests, negative tests, and property or fuzz tests that exercise policy behavior, integration boundaries, and failure paths. Investigate defects and turn findings into regression coverage.
  • Deliver production-ready components: Add observability, measure performance, debug reliability issues, and contribute to rollout plans and operational documentation for the components you own.
  • Contribute technical judgment: Write focused design documents, explain implementation tradeoffs, participate in code and security reviews, and work with platform, Identity, and Product Security partners to resolve issues within your scope.
  • Help the team deliver: Break work into achievable turning points, communicate dependencies and risks, review code, and share knowledge with other engineers.

What We Need To See:

  • Bachelor's degree or equivalent experience, with 5+ years of relevant industry experience in systems software, backend services, distributed systems, security engineering, or policy infrastructure.
  • Strong programming skills in at least one of Rust, Go, C++, or Python, with experience delivering maintainable, tested production code.
  • Experience building and delivering services or systems components, including API design, integration, debugging, and error handling.
  • Practical experience implementing security controls, such as authorization checks, signature verification, or credential handling, and the ability to reason about trust boundaries and safe failure behavior.
  • Working knowledge of Linux, service-to-service interfaces, automated testing, CI, and software release workflows.
  • Ability to own engineering work through design, implementation, validation, and delivery; communicate technical tradeoffs clearly; and collaborate effectively through design and code reviews.

Ways to Stand Out from the Crowd:

  • Experience with policy engines or authorization systems such as OPA/Rego, Cedar, Zanzibar-style systems, or runtime enforcement frameworks.
  • Experience with signed artifacts, trust-root distribution, key rotation, revocation, or tools such as Sigstore, TUF, or in-toto.
  • Familiarity with AI-agent runtimes, sandboxed execution, tool-call governance, MCP-style routing, or credential isolation.
  • Experience with protobuf/gRPC, schema evolution, backward-compatible APIs, or cloud and enterprise deployment environments.
  • Use of property testing, fuzzing, or other adversarial testing techniques to find security and correctness defects.

Your base salary will be determined based on your location, experience, and the pay of employees in similar positions. The base salary range is 152,000 USD - 241,500 USD for Level 3, and 184,000 USD - 287,500 USD for Level 4.

You will also be eligible for equity and benefits.

Applications for this job will be accepted at least until October 25, 2026.

This posting is for an existing vacancy.

NVIDIA uses AI tools in its recruiting processes.

NVIDIA is committed to fostering an inclusive work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against NVIDIA's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on NVIDIA's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    NVIDIA's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.